Privacy policy
Last updated · 2026-07-14 · Next review 2027-01-14
What we collect
· Account: email, display name, sign-in method (Email / Google / Apple) · Chart input: date, time, and place of birth (encrypted at rest, used for calculation) · Usage: anonymous charts, report orders, payment status · Device: IP, user agent, referrer (for abuse prevention and analytics) · Waitlist: email + locale preference (for product updates, unsubscribe anytime)
How we use it
· Provide chart calculation and report generation · Send order confirmations, report-ready notifications, and key product updates · Improve the product (aggregate analytics — not identifying) · Prevent abuse (Turnstile human-check) We do NOT: · Sell or rent your data · Run cross-device ad tracking · Use your data to train AI models (our AI reports call third-party APIs; they do not train on your prompts)
Third-party processors
· Vercel — application hosting · Supabase — database and storage in the configured project region · Creem — hosted checkout when payments are enabled (card numbers do not reach Wenxing servers) · Cloudflare — CDN, abuse prevention, and configured email-routing features · The configured AI provider — report generation Each processor receives only the data needed for its role and operates under its own privacy terms. Cross-border safeguards are applied where required by applicable law and the relevant provider agreement.
Cookies & local storage
· wx-locale — remembers your language choice (1-year TTL) · session — Better Auth session (HttpOnly + Secure + SameSite=Lax) · _turnstile — transient Cloudflare abuse-prevention cookie, cleared after verify No advertising cookies. No third-party tracking pixels.
Your rights
Under GDPR / CCPA / PIPL, you can: · Access — get a copy of your data · Rectify — correct inaccuracies · Delete — remove your account and all linked data (irreversible, completed within 30 days) · Portability — export as JSON / CSV · Object / restrict — opt out of analytics or marketing emails Exercise these by emailing support@wenxing.app (subject: privacy request) — we reply and process within 30 days.
Retention
· Account data — kept while your account is active; hard-deleted within 30 days of account deletion · Payment records — retained for 7 years per accounting rules (metadata only, no card numbers) · Logs / analytics — 90-day rolling window after aggregation · Waitlist emails — until you unsubscribe
Children
Wenxing is for users aged 16 and older. We do not knowingly collect data from children under 16. If we have, please contact us for immediate deletion.
Changes
Material changes are announced via email to registered users. Minor edits (typos, links) only bump the 'Last updated' line at the top of this page.